Description
The LoadText method in the spreadsheet component in Microsoft Office Web Components (OWC) 2000 and 2002 allows remote attackers to read arbitrary files through Internet Explorer via a URL that redirects to the target file.
References
- MS02-044 vendor-advisory
- owc-spreadsheet-loadtext-read-files (8778) vdb-entry
- 3007 vdb-entry
- 20020408 Reading local files with OWC in IE (GM#006-IE) mailing-list
- 4453 vdb-entry